<html><head></head><body><div class="ydpdf1702b7yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;"><div></div>
<div dir="ltr" data-setdir="false"><div>Thanks. I tried this on the host :<br><br>sudo ifconfig br-ex 172.24.4.1 netmask 255.255.255.0 up<br>sudo iptables -t nat -A POSTROUTING -s 172.24.4.254/24 -o wlo1 -j MASQUERADE<br><br>I then connect to the VM through ssh and still no internet:<br>sudo apt-get update returns :<br>W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/focal/InRelease Temporary failure resolving 'archive.ubuntu.com'<br><br>Any other suggestion please ?<br><br></div><div><br></div></div><div><br></div>
</div><div id="ydpad23102byahoo_quoted_2913656158" class="ydpad23102byahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Thursday, January 20, 2022, 11:46:12 AM GMT+1, Slawek Kaplonski <skaplons@redhat.com> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div dir="ltr">Hi,<br clear="none"><br clear="none">In devstack, we are configureing MASQUARADE for the FLOATINT_RANGE to be able <br clear="none">to go outside the devstack node. See <a shape="rect" href="https://github.com/openstack/devstack/" rel="nofollow" target="_blank">https://github.com/openstack/devstack/</a><br clear="none">blob/24b65adc9cedff9c7a8ab412fb39613ef5d4a627/lib/neutron-legacy#L704 for the <br clear="none">details. Maybe You need to configure something like that on Your setup?<br clear="none"><div class="ydpad23102byqt8951293319" id="ydpad23102byqtfd42262"><br clear="none">On środa, 19 stycznia 2022 23:29:35 CET Celinio Fernandes wrote:<br clear="none">> Hi,still trying to reach the external network from inside the VM.I have not<br clear="none">> set up any DNS server on any of the interfaces (shared and public).Do i need<br clear="none">> to add one ?<br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> On Sunday, January 16, 2022, 02:12:00 PM GMT+1, Celinio Fernandes<br clear="none">> <<a shape="rect" href="mailto:cel975@yahoo.com" rel="nofollow" target="_blank">cel975@yahoo.com</a>> wrote:<br clear="none">> <br clear="none">> Hi,<br clear="none">> I can ssh into the instance now but I noticed the VM does not have any<br clear="none">> external network access (internet). Before I dig any deeper into that<br clear="none">> problem, does anyone know what configuration i need to set up for that ? I<br clear="none">> already added 2 new security rules to make sure I can access HTTP and HTTPS<br clear="none">> ports (80 and 443), in vain : Ingress IPv4 TCP 80 (HTTP) 0.0.0.0/0<br clear="none">> Ingress IPv4 TCP 443 (HTTPS) 0.0.0.0/0<br clear="none">> <br clear="none">> <br clear="none">> Thanks.<br clear="none">> <br clear="none">> On Saturday, January 15, 2022, 12:29:40 AM GMT+1, Celinio Fernandes<br clear="none">> <<a shape="rect" href="mailto:cel975@yahoo.com" rel="nofollow" target="_blank">cel975@yahoo.com</a>> wrote:<br clear="none">> <br clear="none">> Thanks very much for your help.<br clear="none">> Before you replied, I tried what you wrote but on the wrong interfaces :<br clear="none">> enp0s3 and virbr0.<br clear="none">> I had no idea I needed to add the IP address from the public network's <br clear="none">subnet<br clear="none">> on the br-ex interface. So to ping/ssh the floating IP this is what I did :<br clear="none">> ip link set dev br-ex up<br clear="none">> ip link set dev br-ex state up<br clear="none">> sudo ip addr add 172.24.4.254/24 dev br-ex<br clear="none">> And then I can finally ping the floating IP :<br clear="none">> ping 172.24.4.133<br clear="none">> And I can also ssh into the VM :<br clear="none">> ssh <a shape="rect" href="mailto:cirros@172.24.4.133" rel="nofollow" target="_blank">cirros@172.24.4.133</a><br clear="none">> <br clear="none">> Thanks again :)<br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> On Sunday, January 9, 2022, 08:21:18 PM GMT+1, Slawek Kaplonski<br clear="none">> <<a shape="rect" href="mailto:skaplons@redhat.com" rel="nofollow" target="_blank">skaplons@redhat.com</a>> wrote:<br clear="none">> <br clear="none">> Hi,<br clear="none">> <br clear="none">> On niedziela, 9 stycznia 2022 09:17:18 CET Celinio Fernandes wrote:<br clear="none">> > Hi,<br clear="none">> > I am running Ubuntu Server 20.04 LTS on Virtualbox. I installed OpenStack<br clear="none">> > (Xena release) through Devstack. Here is the content of my<br clear="none">> > /opt/stack/devstack/local.conf file :<br clear="none">> > [[local|localrc]]<br clear="none">> > ADMIN_PASSWORD=secret<br clear="none">> > DATABASE_PASSWORD=$ADMIN_PASSWORD<br clear="none">> > RABBIT_PASSWORD=$ADMIN_PASSWORD<br clear="none">> > SERVICE_PASSWORD=$ADMIN_PASSWORD<br clear="none">> > HOST_IP=10.0.2.15<br clear="none">> > <br clear="none">> > <br clear="none">> > I created an instance through Horizon. The security group contains the<br clear="none">> > 2 rules needed (one to be able to ping and one to be able to ssh the<br clear="none">> > instance). I also allocated and associated a floating IP address. And a ssh<br clear="none">> > key pair.<br clear="none">> > <br clear="none">> > Here is the configuration :<br clear="none">> > openstack server list<br clear="none">> > ---------------------------------+--------------------------+---------+<br clear="none">> > <br clear="none">> > | ID | Name | Status | Networks | Image | Flavor |<br clear="none">> > <br clear="none">> > ---------------------------------+--------------------------+---------+<br clear="none">> > <br clear="none">> > | f5f0fdd5-298b-4fa3-9ee9-e6e4288f4327 | InstanceJanvier | ACTIVE |<br clear="none">> > | shared=172.24.4.133, 192.168.233.165 | cirros-0.5.2-x86_64-disk | <br clear="none">m1.nano<br clear="none">> > <br clear="none">> > ------------------------------------------------------+<br clear="none">> > <br clear="none">> > <br clear="none">> > openstack network list :<br clear="none">> > ------------------------------------------------------+<br clear="none">> > <br clear="none">> > | ID | Name | Subnets |<br clear="none">> > <br clear="none">> > ------------------------------------------------------+<br clear="none">> > <br clear="none">> > | 96a04799-7fc7-4525-b05c-ad57261aed38 | public |<br clear="none">> > | 07ce42db-6f3f-4135-ace7-2fc104ea62a0,<br clear="none">> > | 6dba13fc-b10c-48b1-b1b4-e1f1afe25b53<br clear="none">> > | <br clear="none">> > | | c42638dc-fa56-4644-ad34-295fce4811d2 | shared |<br clear="none">> > | <br clear="none">> > | a4e2d8cc-02b2-42e2-a525-e0eebbb08980 <br clear="none"> <br clear="none">> > | <br clear="none">> > | | ffb8a527-266e-4e96-ad60-f7e9aba8f0c1 | private |<br clear="none">> > | <br clear="none">> > | 42e36677-cf3c-4df4-88a1-8cf79b9d6060,<br clear="none">> > | e507e6dd-132a-4249-96b1-83761562dd73<br clear="none">> > <br clear="none">> > ------------------------------------------------------+<br clear="none">> > <br clear="none">> > openstack router list :<br clear="none">> > +--------------------------------------+----------------+--------+------<br clear="none">> > <br clear="none">> > | ID | Name | Status | State | Project |<br clear="none">> > <br clear="none">> > +--------------------------------------+----------------+--------+------<br clear="none">> > <br clear="none">> > | b9a15051-a532-4c93-95ad-53c057720c62 | Virtual_router | ACTIVE | UP |<br clear="none">> > | 6556c02dd88f4c45b535c2dbb8ba1a04 |<br clear="none">> > <br clear="none">> > +--------------------------------------+----------------+--------+------<br clear="none">> > <br clear="none">> > <br clear="none">> > I cannot ping/ssh neither the fixed IP address or the floating IP address :<br clear="none">> > ping -c 3 172.24.4.133<br clear="none">> > PING 172.24.4.133 (172.24.4.133) 56(84) bytes of data.<br clear="none">> > --- 172.24.4.133 ping statistics ---<br clear="none">> > 3 packets transmitted, 0 received, 100% packet loss, time 2035ms<br clear="none">> > <br clear="none">> > ping -c 3 192.168.233.165<br clear="none">> > PING 192.168.233.165 (192.168.233.165) 56(84) bytes of data.<br clear="none">> > --- 192.168.233.165 ping statistics ---<br clear="none">> > 3 packets transmitted, 0 received, 100% packet loss, time 2035ms<br clear="none">> > <br clear="none">> > Maybe that has something to do with the network namespaces configuration on<br clear="none">> > Ubuntu. Does anyone know what could go wrong or what is missing ?<br clear="none">> > Thanks for helping.<br clear="none">> <br clear="none">> If You are trying to ping Floating IP directly from the host where devstack<br clear="none">> is installed (Virtualbox VM in Your case IIUC) then You should first have<br clear="none">> those floating IP addresses somehow reachable on the host, otherwise traffic<br clear="none">> is probably going through default gateway so is going outside the VM.<br clear="none">> If You are using ML2/OVN (default in Devstack) or ML2/OVS You probably have<br clear="none">> in the openvswitch bridge called br-ex which is used to send external<br clear="none">> network traffic from the OpenStack networks in Devstack. In such case You<br clear="none">> can e.g. add some IP address from the public network's subnet on the br-ex<br clear="none">> interface, like 192.168.233.254/24 - that will tell Your OS to reach that<br clear="none">> subnet through br- ex, so traffic will be able to go "into" the OVS managed<br clear="none">> by Neutron.<br clear="none"><br clear="none"><br clear="none"><br clear="none">-- <br clear="none">Slawek Kaplonski<br clear="none">Principal Software Engineer<br clear="none">Red Hat</div></div></div>
</div>
</div></body></html>